This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File:                     kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier:          F2rlIAWId4jzpN6IBl4yqMSV8EGxEt4iAPomBiSFTmk=
Subject key identifier:   2D:9D:A6:07:63:B4:CE:C1:EA:7C:64:E1:CD:E8:80:3E:F6:71:23:E4
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer:       /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial:       019B2A40D9A5628F788A89E9BE41456175FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number:          1782
Signing time:             Wed 17 Dec 2025 03:00:51 +0000
Manifest this update:     Wed 17 Dec 2025 03:00:51 +0000
Manifest next update:     Thu 18 Dec 2025 03:00:51 +0000
Files and hashes:         1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
                          2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: 36+8Wg7aoa0MimoIHSxUXpQU5uGRnfCOF0YJcLRvnZM=)
                          3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:40:d9:a5:62:8f:78:8a:89:e9:be:41:45:61:75:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
        Validity
            Not Before: Dec 17 03:00:51 2025 GMT
            Not After : Dec 18 03:00:51 2025 GMT
        Subject: CN=2d9da60763b4cec1ea7c64e1cde8803ef67123e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:4b:28:cb:61:7e:46:b0:a3:fa:c1:8e:80:
                    14:89:b1:b3:5c:5f:83:c0:a9:b6:82:36:c8:0b:10:
                    05:41:a0:0c:01:f2:dc:09:45:e7:22:66:28:98:76:
                    4f:93:4b:e6:3e:1b:95:d9:63:a5:5a:32:db:dd:5f:
                    d3:cd:4f:1c:63:79:55:03:4d:8e:f4:7d:a1:f7:c5:
                    1d:b1:62:97:78:5c:5c:43:8a:76:96:b1:a5:85:e3:
                    ea:14:ed:62:bb:a6:eb:b5:3d:76:99:a9:dd:59:fc:
                    2b:ec:2b:6f:6c:24:65:e2:18:dc:5c:d5:2e:1a:b8:
                    13:b1:be:77:77:b2:d5:95:d4:c9:fb:28:71:fa:a0:
                    e0:b8:40:bb:d5:ab:10:09:47:37:cc:c9:90:74:47:
                    6f:8e:45:8a:d9:30:7c:81:11:a1:77:e3:e6:33:52:
                    dc:57:1e:6c:ec:7c:28:0b:52:c1:33:b6:ca:13:67:
                    81:83:6a:21:9d:bb:8e:b1:e4:1d:ac:04:e3:6a:a9:
                    1c:a4:9a:6b:5f:3f:00:26:cc:a3:e2:52:2b:f0:62:
                    33:57:7b:9c:d9:fa:6a:60:7c:f2:13:d7:8d:b8:b5:
                    f7:b7:0a:06:ff:7a:7c:4f:5f:a3:3b:83:cc:6c:5e:
                    5a:8d:55:03:cb:0b:d7:c1:61:01:20:27:13:a6:60:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:A6:07:63:B4:CE:C1:EA:7C:64:E1:CD:E8:80:3E:F6:71:23:E4
            X509v3 Authority Key Identifier:
                keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8d:37:78:68:b8:1f:cd:9c:73:c5:0b:2d:29:83:44:31:f1:
         a0:dc:9f:22:ef:da:f9:b5:6d:d7:ed:9d:30:71:e5:75:a6:20:
         7c:02:97:08:c1:c7:ff:c3:70:28:99:55:0b:1f:40:35:24:ae:
         11:6e:f6:02:de:27:24:03:53:b6:06:96:37:13:9c:3d:31:93:
         f2:88:71:8f:95:48:4d:c5:29:0d:d3:cf:2b:86:54:8c:76:13:
         f5:37:34:f0:a9:cd:48:5d:61:54:b4:de:29:21:df:9a:99:3e:
         28:ab:a9:de:48:a8:dd:4c:85:ae:6d:e9:d1:73:01:52:fb:ce:
         34:69:75:89:7d:c3:df:50:e1:36:e4:50:55:96:7e:ec:28:fb:
         dc:f4:c8:44:40:4f:70:7b:dd:16:a7:51:3f:a4:6a:a5:ce:86:
         00:15:92:df:7a:d5:5c:7b:4b:c9:56:91:3a:b0:f8:e8:d6:78:
         67:87:85:98:e4:7d:94:0e:b6:64:76:03:0c:c0:45:3e:93:b1:
         b2:73:bc:04:97:ee:d2:9e:fd:86:a6:00:89:76:db:72:e5:3c:
         b8:95:b0:8e:02:ab:c9:ee:af:2c:82:61:74:16:d5:a9:94:d3:
         a8:91:77:f7:e9:ab:c7:f1:41:6b:56:d1:b6:d5:22:bf:5c:56:
         88:dd:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 08:28:56 2025 by rpki-client